Home Malware Programs Remote Administration Tools Lula

Lula

Posted: March 28, 2006

This is a Remote Administration Tool that is used by hackers to control the victim's machine remotely. The possibilities of such application depend on the needs of the attacker. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. Some RATs can't really harm your PC and the only purpose they were made for is hooliganism. But some versions can steal vital information, remove files and even crash your computer. Several versions of this pest appeared in the internet from April 2002 to June 2003. The application is written in Visual Basic applicationming language. The author is a Spanish hacker called Pepiusqui.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 _.exe
    2 cliente.exe
    3 dllexec.exe
    4 eljefe.exe
    5 leeme.txt
    6 leer.txt
    7 server.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionunjamilHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunserviceswinapiunwidpepHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversion
Loading...